GENERAL FINITE-FIELD MULTIPLIER AND METHOD OF 

THE SAME 
BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The present invention relates to the field of finite-field multipliers, 
and more particularly, to a general finite-field multiplier and the method 
of the same. 

2. Description of Related Art 

A finite-field element is a value with a fixed bit number, for 
example, an element has four bits, and thus 16 values are possibly formed. 
Since in the encryption or error correction (such as Reed-Solomon code, 
abbreviated as RS code), signals are necessary to be coded so that the 
coded value can be represented by a mathematical polynomial p(x) and 
then a decoded operation can be used. Therefore, each fixed bit value 
must be given a representation symbol. Furthermore, the AND and XOR 
operations can be performed between these symbols for generating 
another symbols. For example, four bits are used as a symbol of an 
element. When AND or XOR operations are performed between 
different elements, at most only 16 results may be generated. Therefore, 
the set of these symbols having four bits can be used as a finite field. 
Through the operations of these elements in the finite field, the data can 
be encrypted or decrypted, and coded or decoded. 

For the addition of two elements, it can be implemented by an 
XOR gate. However, to design the circuit for the multiplying operation of 
two elements is more complex. Conventionally, the multiplying 
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operation is performed by a finite-field multiplier formed by, for example, 
a Berlekamp multiplier and two basis converters. This finite-field 
multiplier is known as a bit-serial multiplier. Therefore, the circuit 
structure is very simple. However, an obvious disadvantage is that the 
5 speed of multiplying is very slow. Moreover, the specification of p(x) is 
formed by a constant form, and thus, it can not be adjusted according to 
the practical requirement. 

In order to avoid the problem in that the speed of the multiplier is 
too slow, a parallel construction may be used. This parallel multiplier 
10 primarily utilizes a Mastrovito finite-field multiplying operation, 
wherein one of two elements to be multiplied is at first converted to a 
matrix, and then vector-multiplied with the second element for 
generating a desired value. Therefore, the parallel multiplier is primarily 
formed by AND gates and XOR gates, and the components thereof are 
15 increased with the highest order of m. Therefore, the complexity of the 
hardware is 0(m 2 ). 

As such, the finite-field multiplier is improved from the 
conventional bit-serial multiplier into a parallel multiplier. Most of the 
design specification of the multiplier is constant. When the specification 
20 of the p(x) is changed, the conventional constant-type p(x) can not be 
used. Therefore, Hasan disclosed an adjustable bit-serial systolic finite- 
field multiplier, wherein the p(x) is changeable. Fig. 6 shows a bit-serial 
systolic matrix generator of a finite-field element multiplier disclosed by 
Hasan, which is provided primarily for receiving an element 
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A (ao,a\> >cim-\) to generate a column vector for matrix operation, 

wherein columns 1 — m-1 will generate the column vector of the matrix, 
while the p(x) is changeable and can control the bit number of an element. 
The circuit structure of a combination component Q in this multiplier is 
5 illustrated in Fig. 7. There are three input values, wherein p. is a series 
of coefficients input to the p(x). As the first bit value of the symbol is 

received, q in will input an 1, otherwise a 0 , while a ™ will generate the 
operation value in the matrix. The operation of the circuit is listed in the 
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following: 

10 if ^^ = 1 

then 

Clout" 'T • T ~Gi n . 
else 

& out & temp j & temp & in • 
Y$ ^ out Q temp j Q temp ^ in • 

Fig. 8 shows a complete functional module of this multi- 
functional bit-serial multiplier. The circuit of the internal element W 
thereof is illustrated in Fig. 9. Therefore, in this multiplier, element Q is 
used as a synthetic circuit for embodying required values in the matrix 
20 operation, and then, together with the element W and several dozens of 
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flip-flops, the circuit of the multiplier can be accomplished. However, 
this circuit is only suitable for a finite-field multiplier with a constant 
length. In comparing with the aforesaid conventional multiplier with a 
constant p(x), there are too many logic gates used. Therefore, the 
disadvantage is that a large latency is employed in the data output of the 
circuit. 

In the aforementioned conventional bit-serial multiplier, as a bit 
value is received, the shifting and multiplying operations must be 
performed for generating a desired value. The time of shifting for a 
multiplying operation of two elements in the multiplier is related to the 
highest order of the p(x) or is related to the number of bits interpreting a 
symbol. When the highest order of p(X) becomes larger, although the 
conventional bit-serial multiplier has less logic gate delays, the output 
thereof is in a bit serial manner, which may cause a serious problem in the 
computation of a Reed-Solomon code algorithm. Therefore, it is 
desirable to provide an improved general finite-field multiplier device 
and the method of the same to mitigate and/or obviate the 
aforementioned problems. 
SUMMARY OF THE INVENTION 

The object of the present invention is to provide a general finite- 
field multiplier and the method of the same, wherein a programmable 
multi-bit input and a programmable multi-bit multiplying operation are 
used, so that it can be integrated with a conventional system to provide a 
high convenience and it can be used in the RS chip for different 
specifications. 



In accordance with a first aspect of the present invention, there is 
provided a general finite-field multiplication method for performing 
A x B = C from finite-field elements A and B and a polynomial p(x) to 
obtain a finite-field element C. The method comprises: a step of 
5 generating a parallel column-based matrix vector for expanding A into a 
matrix form and sequentially generating each element in each column of 
said A matrix, wherein the elements have values of 
A, Aa,Aa 2 •• - Aa m ^ respectively; and a step of a parallel column- 
based vector multiplication operation for directly multiplying each 
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£« 10 element of each column of the matrix A, that is generated sequentially, 
Sj with the vector B, and all the multiplication results are accumulated so as 

to acquire the vector C. 
Ill t In accordance with a second aspect of the present invention, there 

iij is provided a general finite-field multiplication method for performing 
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Q 15 A x B = C from finite-field elements A and B and a polynomial p(x) to 
obtain a finite-field element C. The method comprises: a step of 
generating a parallel matrix vector for generating the values of the 
elements in all columns of said matrix A is at a time, wherein the values 
are ^>da,Aa A a ^ respectively; and a step of parallel column- 
20 based vector multiplication operation for multiplying matrix A with said 
vector B when the matrix A is generated, so as to acquire the vector C. 

In accordance with a third aspect of the present invention, there is 
provided a general finite-field multiplier for performing A x B = C 
from finite- field elements A and B and a polynomial p(x) to obtain a 
25 finite-field element C. The multiplier comprises: a parallel column-based 



matrix vector generator for expanding A into a matrix form and 
sequentially generating each element in each column of said A matrix, 
wherein the elements have values of A > Aa > ^oc 2 •••Aa m \ respectively; 
and a parallel column-based vector multiplication operator for directly 
5 multiplying each element of each column of the matrix A, that is 
generated sequentially, with the vector B, and all the multiplication 
results are accumulated so as to acquire the vector C. 

In accordance with a fourth aspect of the present invention, there 
p is provided a general finite-field multiplier for performing A x B = C 

Cu 10 from finite-field elements A and B and a polynomial p(x) to obtain a 
Mi finite-field element C. The multiplier comprises: a parallel matrix vector 

generator for generating the values of the elements in all columns of said 
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matrix A is at a time, wherein the values are ^>^«>^« •• acc ^ 
respectively; and a parallel vector multiplication operator for multiplying 

O 15 matrix A with said vector B when the matrix A is generated, so as to 
acquire the vector C. 

Other objects, advantages, and novel features of the invention 
will become more apparent from the following detailed description when 
taken in conjunction with the accompanying drawings. 
20 BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 shows a structure of a preferred embodiment of the 
finite-field multiplier according to the present invention. 

FIG. 2 shows a circuit of the finite-field multiplier illustrated in 

Fig. 1. 

25 Fig. 3 shows a structure of another preferred embodiment of the 
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finite-field multiplier according to the present invention. 

Fig. 4 is a circuit diagram of a parallel matrix vector generator 
illustrated in Fig. 3. 

Fig. 5 is a circuit diagram of the parallel vector multiplication 
operator of the present invention. 

Fig. 6 is a matrix generator of a conventional Hasan finite-field 

multiplier. 

Fig. 7 shows the internal circuit structure of the combination 
component Q of Hasan finite-field multiplier illustrated in Fig. 6. 

Fig. 8 shows a completed function module of the conventional 
Hasan finite-field multiplier. 

Fig. 9 is a circuit diagram of the internal components of a Hasan 
finite-field multiplier illustrated in Fig. 8. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

The general finite-field multiplier and the method of the same 
according to the present invention will be described in the following with 
reference to the finite-field multiplying operation of C = A * B mod p(x) 
illustrated in equation (1). Based on the parallel multiplier algorithm 
disclosed by Mastrovito, A is first expressed in a matrix form by the 
relation of each element with the p(x), and then matrix-multiplied with B 
so as to generate the value of matrix C. 

C=AB mod p(x) 

= boA+bi(Aa mod p(x)) 
+bi(A a 2 mod /?(*))+ 

+b m -i(A a m - 1 mod /?(*))• (1) 
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C=AB modp(x) 

= boA+b\(Aa modp(x)) 

+b 2 (Aa 2 mod/?(x))+ 

+b m -\(A a m ~ x mod/7(x)). 



(1) 



It is known from equation (1) that when two finite-field elements 
are multiplied, at first, each bit in element A can be expanded through an 
XOR operation, and the expansion value is performed an AND operation 
with each bit in element B for generating the value of element C. 
Therefore, the form of the Mastrovito multiplier is related to a non- 
reducible polynomial p(x). Therefore, the matrix form expanded from the 
equation (1) is given as follows: 

V A a 

Aa k = A (k) = A (k - X) a. modp{x) 



A A a m l Ub = c 
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15 Therefore, it is known that the primary principle of a parallel 

multiplier is to make one of two multiplied elements into a matrix form 
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for being performed with a vector operation with the second element so 
as to generate a desired value. The matrix form is illustrated in equation 
(7). The equation (8) is a matrix form simplified according to an equation 
p(x)=l+x+x 4 . The operation is A x & = c » where A, B and C are 
finite-field elements. Therefore, it is known that the primary circuit 
elements of the parallel multiplier are AND gates and XOR gates. With 
the increasing of the highest order of the p(x), i.e. the increasing of the 
value of m, the complexity of the hardware thereof is about 0(m ). 
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According to Mastrovito multiplier equation (7), it is known that 
the vector in the second column vector is generated from various p(x)'s 
and first column vector. The other column vectors can be obtained in the 
same manner, and thus the values in the matrix of equation (7) can be 
generated. Therefore, a multiplier designed in a serial connection manner 
can effectively reduce the cost and area thereof, while the operation 
speed will be slowed down. Therefore, in the present invention, the 
parallel operation in VLSI implementation is employed to quickly obtain 
the result of the multiplication of two finite-field elements. 

According to equation (6), each column matrix in equation (7) 
can be derived by the values of the previous column and the coefficients 
of p(x). The equation (6) is simplified to have the equation (9). From 
equation (9), the vector values of each column can be obtained. From 
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equation (9), it is known that the values of the k-th column are only 
related to the (k-l)-th column and the coefficient of the p(x). In the 
relation, the (k-l)-th column must be at first shifted. Then, the shifted last 

bit value am ~ l and p(x) are AND-ed, and the result is XOR-ed with a 
5 displaced value for generating a matrix of the k-th column. The relation is 

illustrated in equation (9). 

(*)_ (*-l) 
■ do -Om-x 

M 

a^-i=a^+a^Pm-\ ( 9 ) 

Based on the matrix A induced from equation (9), the primary 

principle, i.e. the features, among the columns can be known. Equation 

10 (10) shown the arrangement of matrix A. In brief, the relation of the first 

column and the second column is that the values of the second column is 

derived from the first column by shift each value in first column upwards 

A 

through one element in the matrix. That is, the value of 0 0 in the 
second column is shifted to the position of Am ~ ] - 1 in the second column, 
15 while the values originally in A ^~ A --uo are shifted one position to the 
positions of A °* ~ A ">- 21 in the second column, respectively. Then, 
according to the coefficient of p(x), it is determined whether to add the 

value original in A °° to ^u-^—w . When the coefficients of p(x) with 
respect to the 4>.i~4»-w are l's, then values in A °° ^.i-^-w are 
20 added thereon. For example, if the coefficient of p(x) at position is 1 , 
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then ^ = y4 ° ° 4- A ° l , while the value at 0 0 is placed at the position of 
4»-u Thus, the values of the second column are obtained. The same 
process is used to derive the relation between the second column and the 
third column, the relation between the third column and the fourth 
column, etc., until all the columns in the matrix are derived. 
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Therefore, the relations among the columns can be acquired from 
aforesaid description. Furthermore, from the multiplication equations of 
the finite-field elements, it is known that the vector multiplication 
operation must be used for the multiplying two elements. Therefore, the 
XOR gates and AND gates are required, and thus the circuit for the 
finite-field multiplier of the present invention is derived. Referring to Fig. 
1 , there is shown the structure of the finite-field multiplier according to a 
preferred embodiment of the present invention, which includes a parallel 
column-based matrix vector generator 1 1 and a parallel column-based 
vector multiplication operator 12. The circuit structure of the finite-field 
multiplier is illustrated in Fig. 2. Such a circuit is designed by utilizing 
equation (9), wherein the circuit component for generating the matrix A 
is the parallel column-based matrix vector generator 11, which has 
flip-flops 111 provided primarily for latching the elements in each 
column of the matrix A generated by the parallel column-based matrix 
vector generator 1 1 . The multiplexer MUX is provided to decide which 
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bit will be shifted out so as to determine the size of the matrix A. The 
AND gate is provided to determine whether the shifted value will be 
added to the elements of the next column. The multiplication operation is 
performed by the XOR gate 113. The generated column elements of the 
5 matrix A are then transferred to the parallel column-based vector 
multiplication operator 12. In this circuit, the flip-flop 121 is provided to 
latch the multiplying results of the elements in each column of the matrix 
A with the elements of the vector B. Then, the result is accumulated to 
O the multiplying results of the elements in each column of the matrix A 

CO 10 with the elements of the vector B. After m time of accumulating 
JjJ operations are performed, the desired vector C is generated. The circuit is 

characterized in that only one multiplexer is used to determine the bit for 
being shifted out. Therefore, the whole multiplication circuit is provided 
with a programmable bit number of the finite-field element, so that the 
□ 1 5 number of bits generated in each column of the matrix A has a minimum 
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of 2 and a maximum of m. Furthermore, the p(x) can be changed by an 
external input for matching the requirements of different specifications. 

Fig. 3 shows a structure of another preferred embodiment of the 
finite-field multiplier according to the present invention implemented by 

20 the equation (9), which includes a parallel matrix vector generator 3 1 and 
a plurality of parallel vector multiplication operators 32. The circuit 
structure of the finite-field multiplier is illustrated in Figs. 4 and 5. The 
parallel matrix vector generator 3 1 is primary used to generate a matrix A. 
The basic circuits for each column are denoted by block 2 ~ block m, 

25 which generate the elements in each column of the matrix A, respectively. 
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Similarly, after the matrix A completes the operation, the results are sent 
to the parallel vector generator 32. Then, the vector values of n-th row of 
matrix A are operated with the elements in vector B to acquire each 
element of the vector C. Finally, after all the elements are determined, the 
5 vector C is obtained. The difference of this embodiment from the 
conventional multiplier is that a parallel operation is used in the present 
invention and only m-1 multiplexers (MUX) are used to determine which 
bit is required to be shifted out. Therefore, the number of bit in each 
finite-field element can be determined so that the whole circuit of the 
10 multiplier becomes a multiplier circuit with a programmable bit number 
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l»J of finite-field element, and the p(x) can be changed by an external input. 

m 

The matrix A has a minimum size of 2 x 2 and a maximum size of 
m x m . i n view of the foregoing, it is known that, in the general 
finite-field multiplier and the method of the same according to the 
15 present invention, the AND gates and XOR gates are primary 
components, and the input signals includes elements of the matrix A and 
the vector B and the coefficients of the polynomial p(x). When A, B and 
the coefficients of p(x) are input, the elements in vector C can be obtained 
rapidly. The major difference of the present invention from the 
20 conventional multiplier is that, in the present invention, the inputs 
contain multiple bits, and the multiplication operation is performed with 
multiple bits. Therefore, it is very convenient to be integrated with an 
existing communication system. Accordingly, the multiplier can be used 
in an RS chip for different specifications. 
25 Although the present invention has been explained in relation to 
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its preferred embodiment, it is to be understood that many other possible 
modifications and variations can be made without departing from the 
spirit and scope of the invention as hereinafter claimed. 
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